PRIVACY POLICY

Information Notice pursuant to and for the purposes of Art. 13 et seq. of EU Regulation No. 679/2016 of April 27, 2016 (General Data Protection Regulation - G.D.P.R.) "on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)"
This Privacy Policy aims to inform you, as a User of the website www.midi-makers.com (hereinafter the "Site"), regarding the methods used to process your personal data. We invite you to read it carefully and to acknowledge that by browsing the Site and using its services, you agree to be bound by the terms and conditions set forth in this policy.

1. Data Controller
   The Data Controller is MIDI-MAKERS S.R.L, with registered office at Via Tiengo,15 - Benevento(BN). To report problems, exercise the rights specified in Art. 6 of this policy, or simply request clarification regarding the processing of your personal data, you can contact the Data Controller at the following email address: amministrazione@midi-makers.com
2. Processing Methods
   ‍The Data Controller collects the following types of Personal Data:
   (a) Content and information provided voluntarily by the User:
   Registration and/or contact data: personal details (name and surname), login credentials, and the email address that Users provide when registering and/or sending a contact message. The User's failure to provide such data precludes the provision of the service.
   Transaction data: for example, personal, shipping, and contact details necessary to process orders placed on the Site.
   Payment and tax data: for example, the email address linked to a PayPal account, bank details collected when receiving payments, and company data necessary for invoicing.
   Contact data: for example, the email address used to send communications relating to the services offered or promotional messages. Failure by the User to provide certain Data may prevent the provision of services.
   The User assumes responsibility for the Personal Data of third parties used or shared through the Site and guarantees that they have the right to communicate or broadcast them, freeing the Data Controller from any liability towards third parties. If the processing of Personal Data is based on the User's consent, the User may revoke it at any time.
   (b) Browsing data:
   Acquired automatically during the use of the Site, namely computer data whose transmission is implicit and automatically connected to the use of internet communication protocols. This data is acquired by the computer systems and software procedures operating this Site during their normal operation. This data is not collected to be associated with identified individuals but, by its very nature, could allow users to be identified through processing and association with data held by third parties (please refer to the cookie policy in this document for more details).
3. ⁠Purposes of Processing
   The data collected with the consent of the data subjects is used to provide the e-commerce service or to send informational and promotional messages related to the Site. In particular, the collected data may be used for the following purposes: User registration and authentication. Processing and managing purchases made by the User. Support and contact with the User. External management of payments via credit card or other tools. Data used for payment is acquired directly by the requested payment service provider without being processed in any way by this Site. Sending communications relating to active offers and promotions on the Site. Browsing Data, referred to in Art. 2 above, will be processed for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning.
4. ⁠Processing Methods‍
   The processing of Personal Data is carried out using computer and/or telematics tools, with organizational methods and logic strictly related to the indicated purposes. In addition to the Data Controller, in some cases, other parties involved in the organization of the Site or Third Parties who provide assistance in managing the Site and the business may have access to the Data, such as:
   Entities providing services for the management of the IT system and telecommunications networks (including email).
   Forwarders and carriers for the delivery and collection of products.
   Entities carrying out credit card payments and providing customers with payment-related services.
   These subjects have access only to the personal data strictly necessary to perform their services for the Data Controller and are also obliged to keep personal data confidential and treat it in accordance with this policy and the law.
5. Nature of Data Provision and Legal Basis
   The provision of data, with the exception of the aforementioned browsing data, is optional and self-determined by the user, who thereby attests to its completeness and legitimate processing. Processing takes place on a voluntary basis and only with the explicit consent of the applicant. Any refusal to provide the data in whole or in part may make it impossible for the Data Controller to properly carry out all the obligations associated with the requested service (Art. 13 paragraph 2 letter e) of European Regulation No. 679/2016).
6. Rights of the Data Subjects
   ‍The individuals to whom the aforementioned personal data refers have the right to exercise their rights in the manner and within the limits provided by current applicable law. In relation to the processing of your personal data, you have the right to ask the Data Controller for:
   Access: you can request confirmation as to whether or not your data is being processed, as well as further clarification regarding the information in this Policy, and receive the data itself, within reasonable limits.
   Rectification: you can request to rectify or supplement the data you have provided, if inaccurate.
   Erasure/Right to be forgotten: you can request that your data be deleted if it is no longer necessary for our purposes, or where there are no ongoing disputes or controversies, in the event of consent withdrawal or objection to processing, in case of unlawful processing, or if there is a legal obligation to erase it.
   Restriction: you can request the restriction of the processing of your personal data when one of the conditions set forth in Art. 18 of the GDPR applies; in this case, your data will not be processed, except for storage, without your consent, except as specified in paragraph 2 of the same article.
   Objection: you can object at any time to the processing of your data based on our legitimate interest, unless there are legitimate grounds for processing that override yours (for example, for the exercise or defense of legal claims). Your objection will always prevail over our legitimate interest to process your data for marketing purposes.
   Portability: you can request to receive your data, or have it transmitted to another controller designated by you, in a structured, commonly used, and machine-readable format.
   Furthermore, pursuant to Art. 7, par. 3, GDPR, we inform you that you can exercise your right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Without prejudice to your right to appeal in any other administrative or judicial venue, if you believe that the processing of Personal Data by the Data Controller is in violation of the Regulation and/or applicable law, you may lodge a complaint with the Data Protection Authority.
   To exercise the rights indicated above, report problems, or request clarification on the processing of your personal data, you can contact the Data Controller at the following email address: amministrazione@midi-makers.com
7. Changes to the Privacy Policy
   We reserve the right to modify this document at any time by notifying you through the publication of an updated version on the Site, marked with the wording "last revised on ___" placed at the bottom of the page. In the event of substantial changes, you will be notified via email or by any other suitable means to inform you (including the publication of a specific notice on the Site and/or Blog). Any change will be considered effective on the date of publication. In any case, you acknowledge and agree that your use of the Site following the date on which the changes become effective constitutes acceptance of the same.